freetds AT lists.ibiblio.org
Subject: FreeTDS Development Group
List archive
- From: Igor Korot <ikorot01 AT gmail.com>
- To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
- Subject: Re: [freetds] tsql with SSL on SQL Server
- Date: Thu, 7 Apr 2011 11:22:01 -0700
Hi, Tony,
On Thu, Apr 7, 2011 at 8:31 AM, Tony Baldarelli
<tbaldarelli AT wmsvision.com> wrote:
> Ok, it did not work. I will look up the encryption settings for this
> version and see if maybe something else will work, but I would love some
> feedback as to if I am missing something.
>
> See below:
> • End of /usr/local/etc/freetds.conf
> [MyServer2005]
> host = 192.168.254.91
> port = 1433
> tds version = 8.0
> encryption = request
>
> # A typical Microsoft SQL Server 6.x configuration
> ;[MyServer65]
> ; host = ntmachine.domain.com
> ; port = 1433
> ; tds version = 4.2
> • Failed command ( password removed for security )
> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U nortel -P PASSWORD
> locale is "en_US"
> locale charset is "ISO-8859-1"
> Msg 20017, Level 9, State -1, Server OpenClient, Line -1
> Unexpected EOF from the server
> Msg 20002, Level 9, State -1, Server OpenClient, Line -1
> Adaptive Server connection failed
> There was a problem connecting to the server
> • Version
> [tonyb:v9_odbc:V3_18]> tsql -C
> Compile-time settings (established with the "configure" script)
> Version: freetds v0.82.1.dev.20110306
> freetds.conf directory: /usr/local/etc
> MS db-lib source compatibility: no
> Sybase binary compatibility: no
> Thread safety: yes
> iconv library: yes
> TDS version: 5.0
> iODBC: no
> unixodbc: yes
> • Date stamp of tsql command
> [tonyb:v9_odbc:V3_18]> ls -lt /usr/local/bin/tsql
> -rwxr-xr-x 1 root root 1487662 Apr 7 11:22
> /usr/local/bin/tsql
> [tonyb:v9_odbc:V3_18]>
Are you trying to connect to the Sybase server or MS SQL server? If
the latter what version - 2005 or some other?
Thank you.
>
>
> Tony
>
>
> -----Original Message-----
> From: freetds-bounces AT lists.ibiblio.org
> [mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of Tony Baldarelli
> Sent: Thursday, April 07, 2011 11:06 AM
> To: 'FreeTDS Development Group'
> Subject: Re: [freetds] tsql with SSL on SQL Server
>
> Thanks. Is the feature you disabled in the patch important? More
> precisely, what kind of feature is it? Always sort of makes me nervous
> when I hear people disabled a feature, so that is why I ask. I will
> definitely be trying this patch, so thanks for that idea.
>
>
> You might not be able to answer this, but what are the merits to using
> openssl or gnutls with freetds?
>
> Tony
>
>
> -----Original Message-----
> From: freetds-bounces AT lists.ibiblio.org
> [mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of Frediano Ziglio
> Sent: Thursday, April 07, 2011 5:07 AM
> To: FreeTDS Development Group
> Subject: Re: [freetds] tsql with SSL on SQL Server
>
> 2011/4/7 Tony Baldarelli <tbaldarelli AT wmsvision.com>:
>> Hello,
>> We are moving to using SSL to connect to our SQL Server databases.
>> Currently I cannot get it to work and was wondering if there was some
>> documentation out there on it. So far the documentation I have read does
>> not work. For instance, it tells me to set "encryption" in the
>> freetds.conf
>> to either "request" or "required", which I have tried.
>>
>> I currently use openssl, but I do see references to it working with
>> gnutls, so I might look that up as well.
>>
>>
>> Tony Baldarelli
>>
>>
>> P.S. For those who are curious, here is some data to consider.
>>
>>
>> • Machine 1 tsql ( no osql )
>> o Version:
>> [tonyb:v9_odbc:V3_18]> tsql -C
>> Compile-time settings (established with the "configure"
>> script):
>> Version: freetds v0.63
>> MS db-lib source compatibility: no
>> Sybase binary compatibility: unknown
>> Thread safety: yes
>> iconv library: yes
>> TDS version: 4.2
>> iODBC: no
>> unixodbc: yes
>> [tonyb:v9_odbc:V3_18]>
>> o Error:
>> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U <user
>> removed for security> -P <password removed for security>
>> locale is "en_US"
>> locale charset is "ISO-8859-1"
>> Msg 20004, Level 9, State 0, Server OpenClient, Line 0
>> Read from SQL server failed.
>> Msg 20014, Level 9, State 0, Server OpenClient, Line 0
>> Login incorrect.
>> There was a problem connecting to the server
>> [tonyb:v9_odbc:V3_18]>
>> o freetds section for machine 1. Note that "encryption" does
>> not work with this version, so that is why it is commented out.
>> [MyServer2005]
>> host = 192.168.254.91
>> port = 1433
>> tds version = 8.0
>> ##encryption = request
>> • Machine 2 tsql, new version
>> o Version:
>> [tonyb:v9_odbc:V3_18]> tsql -C
>> Compile-time settings (established with the "configure"
>> script)
>> Version: freetds v0.82
>> freetds.conf directory: /usr/local/etc
>> MS db-lib source compatibility: no
>> Sybase binary compatibility: no
>> Thread safety: yes
>> iconv library: yes
>> TDS version: 5.0
>> iODBC: no
>> unixodbc: yes
>> [tonyb:v9_odbc:V3_18]>
>> o Test:
>> [tonyb:v9_odbc:V3_18]> tsql -S myserver2005 -U <user
>> removed for security> -P <password removed for security>
>> locale is "en_US"
>> locale charset is "ISO-8859-1"
>> Msg 20017, Level 9, State -1, Server OpenClient, Line -1
>> Unexpected EOF from the server
>> Msg 20002, Level 9, State -1, Server OpenClient, Line -1
>> Adaptive Server connection failed
>> There was a problem connecting to the server
>> [tonyb:v9_odbc:V3_18]>
>> • Machine 2 tsql, old version
>> o Version:
>> [tonyb:v9_odbc:V3_18]> tsql.old -C
>> Compile-time settings (established with the "configure"
>> script):
>> Version: freetds v0.64.dev.20051213
>> MS db-lib source compatibility: no
>> Sybase binary compatibility: unknown
>> Thread safety: yes
>> iconv library: yes
>> TDS version: 5.0
>> iODBC: no
>> unixodbc: yes
>> [tonyb:v9_odbc:V3_18]>
>> o Test:
>> [tonyb:v9_odbc:V3_18]> tsql.old -S myserver2005 --U <user
>> removed for security> -P <password removed for security>
>> locale is "en_US"
>> locale charset is "ISO-8859-1"
>> Msg 20004, Level 9, State 0, Server OpenClient, Line 0
>> Read from SQL server failed.
>> Msg 20014, Level 9, State 0, Server OpenClient, Line 0
>> Login incorrect.
>> There was a problem connecting to the server
>> [tonyb:v9_odbc:V3_18]>
>> • Machine 2 osql
>> o It is supposed to go into isql when it is done, but it does
>> not.
>> o Output:
>> [tonyb:v9_odbc:V3_18]> osql -S wv8 -U nortel -P <password
>> removed for security>
>> looking for odbc.ini and odbcinst.ini in /usr/local/etc
>> reading "/home/tonyb/.odbc.ini"
>> [wv8] not found in "/home/tonyb/.odbc.ini"
>> reading "/usr/local/etc/odbc.ini"
>> [wv8] found in "/usr/local/etc/odbc.ini"
>> found this section:
>> [wv8]
>> Driver = Easysoft ODBC-SQL Server SSL
>> Description = Easysoft SQL Server ODBC driver
>> Server = 192.168.254.91
>> Port = 1433
>> Database = wv8_162
>> User = nortel
>> Password = <password removed for security>
>> Mars_Connection = No
>> Logging = Process
>> LogFile =
>> /home/wms/v9_odbc/oracle/8.1.7/LOG/wv8_162.easysoft.ssl2
>> QuotedId = Yes
>> AnsiNPW = Yes
>> Language =
>> Version7 = No
>> ClientLB = No
>> Encrypt = No
>> TrustServerCertificate = No
>> PrivateKeyFile =
>> CertificateFile =
>> Entropy =
>> Failover_Partner =
>> VarMaxAsLong = No
>>
>> looking for driver for DSN [wv8]
>> driver "Easysoft" found for [wv8] in odbc.ini
>> found driver named "Easysoft"
>> Easysoft is not a readable file
>> looking for entry named [Easysoft] in
>> /usr/local/etc/odbcinst.ini
>> no driver mentioned for [Easysoft] in odbcinst.ini
>> [tonyb:v9_odbc:V3_18]>
>> • Machine 2 freetds setup ( uncommenting "encryption" does not really
>> change anything, it still fails with the same errors above )
>> [MyServer2005]
>> host = 192.168.254.91
>> port = 1433
>> tds version = 8.0
>> #encryption = request
>>
>
> At least use version 0.82, patched is better. Obviously we cannot
> support easysoft driver :)
> There is a known issue with early 0.82 and OpenSSL due to a security
> improvement in OpenSSL that is not compatible with MS software. A fix
> (we disable such a feature) has been incorporated in post 0.82
> versions (that is patched version, available at
> http://ibiblio.org/pub/Linux/ALPHA/freetds/stable/ or
> freetds.sourceforce.net). Also recent versions support much better
> encryption settings.
>
> freddy77
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
>
-
[freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/06/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Igor Korot, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Igor Korot, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Tony Baldarelli, 04/07/2011
-
Re: [freetds] tsql with SSL on SQL Server,
Frediano Ziglio, 04/07/2011
- Re: [freetds] tsql with SSL on SQL Server, Igor Korot, 04/08/2011
Archive powered by MHonArc 2.6.24.